shiny-printing
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the system commands
lpandlpstaton Linux and macOS environments to interact with the CUPS (Common Unix Printing System) queue. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted data for document rendering.
- Ingestion points: Untrusted HTML markup or remote URLs passed to the
PrintJob.HtmlandPrintJob.HtmlUrlmethods (SKILL.md). - Boundary markers: None identified in the provided code examples.
- Capability inventory: The skill uses
lpsubprocess calls, opens raw TCP sockets (port 9100), and writes PDF files to local storage viaFile.WriteAllBytesAsync(SKILL.md). - Sanitization: No specific sanitization or HTML escaping logic is described before the content is passed to the browser-based rendering engine.
- [DATA_EXFILTRATION]: The skill facilitates network reconnaissance through the
networkScanner.Sweep()method, which performs a port sweep (port 9100) across local IPv4 subnets to discover printers. While intended for legitimate hardware discovery, this capability allows the agent to map active hosts on the internal network.
Audit Metadata